$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa File: 002e220d-5567-33ef-bd92-28d89dfe57f5.roa (raw, json) Hash identifier: 6/LL+xz1EFAwCgIK0riyrq8CFJNQzOfRPzqL7sYJLKU= Subject key identifier: 52:67:AD:13:BE:53:21:AB:37:1A:5F:55:FB:97:82:97:56:56:74:BD Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a Certificate serial: 010D0C9F4328584F4277F6F4C9B810E68849F280 Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 14445 IP address blocks: 23.174.80.0/24 maxlen: 24 104.249.136.0/24 maxlen: 24 104.249.137.0/24 maxlen: 24 104.249.138.0/24 maxlen: 24 104.249.139.0/24 maxlen: 24 2606:2a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f6:f4:c9:b8:10:e6:88:49:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=a0cbb1bc-5fd6-4d5c-8186-f9a39433941a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:c3:a1:09:8e:ab:ec:fd:a1:27:c5:de:1f: cb:98:3b:6b:2a:ee:ee:62:b2:e6:6d:d7:0d:a9:8d: 9b:55:57:ae:d0:d9:48:bb:07:18:8d:be:a2:7e:05: 9f:36:32:00:9c:26:46:ef:a7:43:20:87:3d:e9:35: 19:a3:5c:e9:70:67:63:27:e6:4e:4e:47:60:1c:35: 17:48:6f:eb:06:8b:a0:d8:bf:58:cf:5d:96:86:0a: 0d:e6:da:89:24:84:34:bb:ee:e3:9a:0f:f6:ae:34: 59:e7:62:74:de:7b:3b:97:d6:ea:ef:2a:77:13:d5: bd:d3:8b:d6:64:3c:fa:d4:8d:45:6e:1e:67:01:bb: 4a:a0:f6:56:1c:3f:a1:07:11:a8:9b:57:80:c8:98: 61:4e:d0:df:c7:59:30:23:62:ce:90:3f:ab:3c:7e: df:6c:9d:5b:82:24:97:5d:10:c7:2f:93:75:da:b1: d6:5f:c2:09:58:b7:a3:94:d8:ca:1c:80:3c:35:64: 95:03:ca:a7:cb:e5:3d:c6:fe:3f:4d:5d:ba:ac:5f: ce:a0:ff:58:06:cb:30:fc:85:c4:84:95:c3:ea:8d: 5c:9f:db:e6:06:47:e3:c6:ed:10:16:fb:5e:49:f0: 7a:7f:51:a3:d7:bd:42:26:36:3b:b1:be:0f:cc:40: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:67:AD:13:BE:53:21:AB:37:1A:5F:55:FB:97:82:97:56:56:74:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl X509v3 Authority Key Identifier: keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer sbgp-ipAddrBlock: critical IPv4: 23.174.80.0/24 104.249.136.0/22 IPv6: 2606:2a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:67:8a:5c:66:41:d0:2e:c6:2d:6b:ed:38:92:ad:c7:32:29: ad:04:c1:6c:e3:35:90:8b:76:75:ca:04:8f:f1:a4:7a:78:74: c1:88:28:ff:97:8e:89:5c:67:87:e4:ad:e1:30:49:e5:de:12: 2e:11:77:96:c2:52:55:17:bf:31:6c:1d:40:28:77:32:56:6a: 40:5f:f6:70:53:a3:71:45:7b:9a:1e:fc:38:b2:53:84:fa:c7: aa:f7:1b:18:90:c2:d2:34:33:46:cd:4f:fe:61:96:df:13:53: ca:ba:a0:36:21:98:13:77:af:bf:4f:c9:b2:f3:01:12:12:d5: 8b:db:fb:bb:55:e9:05:46:4b:7a:98:05:a6:08:d5:96:f3:a6: 57:89:60:53:37:ac:bb:1d:12:56:6d:b4:2b:13:b3:2f:09:73: a0:24:57:2c:e3:01:5d:f6:a3:b2:db:4b:7c:b1:b7:84:61:a4: 6b:c3:61:86:db:84:71:17:3a:62:75:7e:0d:31:2d:a3:6c:24: 53:a6:32:73:30:bd:9c:a9:a6:97:c8:c0:63:e8:87:41:fc:f9: 39:48:d8:1f:b2:18:e3:aa:26:65:e3:07:3d:14:fd:38:cb:b4: e2:92:f6:4e:7b:16:36:79:e8:06:f3:df:35:7c:e2:25:01:65: 59:90:81:43 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9Cd/b0ybgQ5ohJ8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3 MTBhMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YTBjYmIxYmMtNWZkNi00ZDVjLTgxODYtZjlhMzk0MzM5NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrrDoQmOq+z9oSfF3h/LmDtrKu7uYrLmbdcN qY2bVVeu0NlIuwcYjb6ifgWfNjIAnCZG76dDIIc96TUZo1zpcGdjJ+ZOTkdgHDUX SG/rBoug2L9Yz12WhgoN5tqJJIQ0u+7jmg/2rjRZ52J03ns7l9bq7yp3E9W904vW ZDz61I1Fbh5nAbtKoPZWHD+hBxGom1eAyJhhTtDfx1kwI2LOkD+rPH7fbJ1bgiSX XRDHL5N12rHWX8IJWLejlNjKHIA8NWSVA8qny+U9xv4/TV26rF/OoP9YBssw/IXE hJXD6o1cn9vmBkfjxu0QFvteSfB6f1Gj171CJjY7sb4PzEDaQQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFJnrRO+UyGrNxpfVfuXgpdWVnS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvMDAyZTIyMGQtNTU2Ny0z M2VmLWJkOTItMjhkODlkZmU1N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0 NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz YjU4NDcxMGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF65QAwQC aPmIMA0EAgACMAcDBQAmBipAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH5nilxmQdAuxi1r7TiSrccyKa0E wWzjNZCLdnXKBI/xpHp4dMGIKP+XjolcZ4fkreEwSeXeEi4Rd5bCUlUXvzFsHUAo dzJWakBf9nBTo3FFe5oe/DiyU4T6x6r3GxiQwtI0M0bNT/5hlt8TU8q6oDYhmBN3 r79PybLzARIS1Yvb+7tV6QVGS3qYBaYI1ZbzpleJYFM3rLsdElZttCsTsy8Jc6Ak VyzjAV32o7LbS3yxt4RhpGvDYYbbhHEXOmJ1fg0xLaNsJFOmMnMwvZypppfIwGPo h0H8+TlI2B+yGOOqJmXjBz0U/TjLtOKS9k57FjZ56Abz3zV84iUBZVmQgUM= -----END CERTIFICATE-----Generated at Sun Oct 4 22:48:55 2026 by rpki-client